Information Security Officer Hybrid – Home & London | Permanent | £68,000 | 35 hrs/week (flexible) A rare and brilliant opportunity to join this international development children’s charity, as their new Information Security Officer . You'll be the expert, working closely with the Chief Information Officer and other senior leaders to embed security practices across systems, suppliers … team where the culture is collaborative and down-to-earth. You’ll have the autonomy to get stuck in, alongside the backing to develop professionally, whether that’s through security qualifications or broader leadership skills. What you will be doing As Information Security Officer , you’ll lead the implementation of the organisation’s cyber security plans. Act … as subject matter expert on information security across the organisation Ensure compliance with standards like Cyber Essentials Plus and CIS . Oversee third-party security providers and outsourced ICT services. Manage incident response planning, investigations, and reporting. Deliver engaging training to build a strong security culture. Collaborate with Legal and Data Protection teams to ensure GDPR compliance. More ❯
Information Security Officer Hybrid – Home & London | Permanent | £68,000 | 35 hrs/week (flexible) A rare and brilliant opportunity to join this international development children’s charity, as their new Information Security Officer . You'll be the expert, working closely with the Chief Information Officer and other senior leaders to embed security practices across systems, suppliers … team where the culture is collaborative and down-to-earth. You’ll have the autonomy to get stuck in, alongside the backing to develop professionally, whether that’s through security qualifications or broader leadership skills. What you will be doing As Information Security Officer , you’ll lead the implementation of the organisation’s cyber security plans. Act … as subject matter expert on information security across the organisation Ensure compliance with standards like Cyber Essentials Plus and CIS . Oversee third-party security providers and outsourced ICT services. Manage incident response planning, investigations, and reporting. Deliver engaging training to build a strong security culture. Collaborate with Legal and Data Protection teams to ensure GDPR compliance. More ❯
Head of Information Security Location: London Rate: Up to £1,000/day outside IR35 Hybrid: 50% of time onsite Sector: Strong regulated industries Contract Type: 6-9 months contract Job Summary: Our client, a leading legal firm, is seeking an experienced Head of Information Security to lead their security function and drive enterprise-wide strategy. This … senior leadership role requires someone with a strong legal sector background who can quickly assess their current security posture, identify improvement opportunities, and establish strategic roadmaps. The ideal candidate will bring substantial exposure to data processing, enterprise applications, and outsourced systems, with proven experience in systems design, project management, and crisis management. You will be a highly technical … oversight roles. The ideal candidate will demonstrate collaborative skills, cultural fit, and flexibility to integrate quickly into their established team environment. Key responsibilities: Develop, implement, and manage enterprise-wide security strategy in partnership with senior stakeholders Assess current information security maturity and develop a strategic roadmap to achieve the target state Take ownership of ongoing audit projects and More ❯
Join our Cyber Security Team as a Governance, Risk and Compliance Analyst. If you have been involved in practical aspects of GRC including ISO270001, want to work with a team of dedicated professionals and are able to understand wider business impacts of GRC on a business, please read more and apply. Location We operate a flexible, hybrid working environment … and dental insurance Work. Life. Smarter. Our commitment to a flexible and hybrid working culture As a GRC Analyst you will: Support the development and maintenance of our Information SecurityManagement System (ISMS) including policies, objectives, and risk assessments Assist with internal audits and help prepare for external audits to maintain compliance with ISO27001 and other standards Help … identify and assess information security risks, working closely with the Cyber Risk Manager Provide guidance to colleagues on basic security best practices and requirements Contribute to reporting on the ISMS performance and improvement plans Support continual improvement initiatives and track progress Keep up to date with key trends and changes in information security and ISO standards Help More ❯
Are you looking for an exciting new opportunity? Join a London based, product-agnostic consultancy specialising in information security governance, risk, and compliance management for clients across Europe. With a deep-rooted passion for cyber risk, the team excels at developing measurable controls that align with an organisation's risk appetite, capacity, and tolerance for breaches. Known for … crafting innovative and cost-effective Information SecurityManagement Systems (ISMS), the consultancy enables quantifiable compliance with key information security legislation, regulations, and industry standards, including PCI DSS, the UK Data Protection Act 2018 (DPA 2018), GDPR, and ISO/IEC 27001. If you would like to learn more about this opportunity, feel free to reach out and … of OWASP methodologies and offensive testing across black/grey/white-box approaches. Proficiency in tools like Burp Suite, Kali, Nmap, Nessus, Qualys, Metasploit. Familiarity with cloud platform security testing (AWS, Azure, GCP). Understanding of mobile security (Android & iOS), networking protocols, and the OSI model. Excellent verbal and written communication skills, especially for client-facing engagements. More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Michael Page Technology
Transformation Standardise and simplify technology governance, policies, and processes to reflect a modern, strategic IT function. Embed frameworks such as: ISO/IEC 27001: The international standard for information securitymanagement systems (ISMS), ensuring data confidentiality, integrity, and availability. ITIL (Information Technology Infrastructure Library): A framework for standardising IT service management practices and aligning them with business … to reduce cost and complexity. Oversee the consolidation of the IT environment, supporting migration towards a unified operating ecosystem (currently a mix of Microsoft and Google platforms). Relationship Management Lead and be responsible for overall implementation of the architecture and technology deliverables, fostering a culture of collaboration across IT and business teams to identify and address IT business … requirements, addressing them effectively. Finance Oversee delivery of financial business cases to reduce IT costs. Profile Experience : Experience in tender negotiation and IT purchasing Experience in supplier and contract management and reviewing performance against SLAs Experienced in developing strong working relationships with key external partners Experience in implementing IT strategies Experienced in running and managing IT infrastructure, application, and More ❯
London, South East, England, United Kingdom Hybrid / WFH Options
Michael Page Technology
Transformation Standardise and simplify technology governance, policies, and processes to reflect a modern, strategic IT function. Embed frameworks such as: ISO/IEC 27001: The international standard for information securitymanagement systems (ISMS), ensuring data confidentiality, integrity, and availability. ITIL (Information Technology Infrastructure Library): A framework for standardising IT service management practices and aligning them with business … to reduce cost and complexity. Oversee the consolidation of the IT environment, supporting migration towards a unified operating ecosystem (currently a mix of Microsoft and Google platforms). Relationship Management Lead and be responsible for overall implementation of the architecture and technology deliverables, fostering a culture of collaboration across IT and business teams to identify and address IT business … requirements, addressing them effectively. Finance Oversee delivery of financial business cases to reduce IT costs. Profile Experience : Experience in tender negotiation and IT purchasing Experience in supplier and contract management and reviewing performance against SLAs Experienced in developing strong working relationships with key external partners Experience in implementing IT strategies Experienced in running and managing IT infrastructure, application, and More ❯
London, offering ahybrid work model. However, for candidates located outside of London, there ispotential for a fully remote arrangement. How you will create impact: Plan audits by analyzing Information Security Standards, such as ISO 27001:2022, and define audit scopes within your area of expertise. Create and maintain structured audit catalogues tailored to the identified scope. Draft audit plans … plan, covering both internal processes and assets as well as audits of external service providers. Assess a broad range of audit topics, including IT systems, infrastructure and processes, information securitymanagement, and on-premise or virtual audits of physical security. Document findings clearly and thoroughly to enable process and asset owners to identify and develop mitigation measures and … in certification audits. Support client assessments by providing information or take part in client meetings. Your profile: You hold a university degree or equivalent in informatics, business informatics, IT security, or a similar field. Fluent English and intermediate German skills (at least B1 level). Trained or have developed yourself into an Auditor or Senior Auditor for information securityMore ❯
microservices, 'DevOps' and reusable Web Components. As an ideal Lead Devops Engineer , you will have a strong understanding of DevOps principals as well as an in-depth knowledge of security best practice with the cloud platform. You will have thorough experience of cloud technologies (preferably Azure Platform) and experience of release and deployment tools. The successful Lead Devops Engineer … scripting languages such as PowerShell scripts, YAML, Python Experience of azure automation using arm templates Experience of Linux, Windows Server, Azure SQL Server, Azure Storage, CosmosDB Experience in cloud securitymanagement (IAM, Security Groups, certificates & key management) Experience with logging, monitoring and alerting platforms such as app Insights Experience of working within an Agile and Scrum More ❯
willing to listen to others ideas. Skin Analytics manufactures medical devices and complies with ISO standards 13485 and 27001. As part of your employment, you will be assigned Quality Management System (QMS) and Information SecurityManagement System (ISMS). We require that our employees agree to complete their assigned training and diligently follow all company quality management and information security processes. The National Institute for Health and Care Excellence has recommended DERM for use within the NHS until May 2028, while further evidence is gathered. Competitive salary Share options package - all our employees have ownership in the company Private healthcare 25 days annual leave (5 day company shutdown in August + bank holidays) Enhanced parental More ❯
the business objectives across new and growth areas. Key Responsibilities: Leading and scaling the UX function - setting up design systems, accessibility standards etc from scratch. Working with the Senior Management Team - making cases for more design resources and continuously measure, track and share the value on an ongoing basis. People Management and Leadership - managing and developing UX Designer … upload your portfolio with your application Skin Analytics manufactures medical devices and complies with ISO standards 13485 and 27001. As part of your employment, you will be assigned Quality Management System (QMS) and Information SecurityManagement System (ISMS). We require that our employees agree to complete their assigned training and diligently follow all company quality management and information security processes. The National Institute for Health and Care Excellence has recommended DERM for use within the NHS until May 2028, while further evidence is gathered. Competitive salary Share options package - all our employees have ownership in the company Private healthcare 25 days annual leave (5 day company shutdown in August + bank holidays) Enhanced parental More ❯
Manage and collaborate with integrations squad - working with Tech Lead, Fullstack Engineer and QA Engineer. Cross functional working - working with other business unit Product Managers, Engineers and the Senior Management Team. Prioritisation and building roadmap for future integrations - push back on requests, guiding teams and strategising about what's best for the business. Managing demanding workload - requests will come … knowledge (platform/backend) is advantageous Skin Analytics manufactures medical devices and complies with ISO standards 13485 and 27001. As part of your employment, you will be assigned Quality Management System (QMS) and Information SecurityManagement System (ISMS). We require that our employees agree to complete their assigned training and diligently follow all company quality management and information security processes. The National Institute for Health and Care Excellence has recommended DERM for use within the NHS until May 2028, while further evidence is gathered. Competitive salary Share options package - all our employees have ownership in the company Private healthcare 25 days annual leave (5 day company shutdown in August + bank holidays) Enhanced parental More ❯
the better our work will be. Skin Analytics manufactures medical devices and complies with ISO standards 13485 and 27001. As part of your employment, you will be assigned Quality Management System (QMS) and Information SecurityManagement System (ISMS). We require that our employees agree to complete their assigned training and diligently follow all company quality management and information security processes. More ❯
of working - within our regulatory standards (ISO 13485, ISO 27001). ️ We want to hear from you if you Have experience in the following tech stack: Frontend: React, State Management, React Native (optional but advantageous) Backend: Node, JavaScript, TypeScript Databases: MySQL Infrastructure: AWS (EC2, SNS/SQS, RDS, ES), Linux Docker Have experience in: Familiarity with Publish-Subscribe pattern … including ISO 62304 (optional but advantageous) Skin Analytics manufactures medical devices and complies with ISO standards 13485 and 27001. As part of your employment, you will be assigned Quality Management System (QMS) and Information SecurityManagement System (ISMS). We require that our employees agree to complete their assigned training and diligently follow all company quality management and information security processes. The National Institute for Health and Care Excellence has recommended DERM for use within the NHS until May 2028, while further evidence is gathered. Competitive salary Share options package - all our employees have ownership in the company Private healthcare 25 days annual leave (5 day company shutdown in August + bank holidays) Enhanced parental More ❯
a culture of learning within the team, enhancing the professional capabilities of team members. Who We Look For - Bachelor's degree or higher, with 5+ years of experience in security assessment, IT audit, or consulting at a leading professional consulting firm or legal firm, in-house experience working in multinational company is a bonus - Strong understanding of global compliance … marketing) and experience in compliance/product workflow design; experience in the internet/gaming industry is a plus. - Expertise in global privacy regulations, including privacy principles, operational legal security frameworks, and compliance solutions. - Proficient in IT audit, information securitymanagement, and IT/technology risk management, with the ability to resolve compliance risks effectively. - Knowledge … of security control frameworks (e.g., ISO27001, ISO20000, ITIL, COBIT) and experience collaborating with information security teams to implement compliance requirements. - Strong problem-solving skills, proactive work ethic, flexible thinking, and the ability to thrive under pressure. - Able to use English and Chinese as working language to interact with stakeholders across the global Equal Employment Opportunity at Tencent As More ❯
UCL research activities. Research Data Stewards (also known as research data managers, data consultants, data wranglers, or bioinformaticians) offer technical support and consultancy to UCL researchers, assisting with data management, policy compliance, and promoting Open Science and FAIR data principles. They will be embedded within research projects but also contribute to new research proposals and collaborate on designing research … are essential to clearly explain technical concepts to non-technical staff. At the Senior grade, candidates should have a strong background working with sensitive data, understanding data governance, information security, and risk management, and be familiar with issues related to handling and disseminating sensitive data. We are especially interested in applicants with experience in areas such as ISO27001 … certification, Information SecurityManagement Systems (ISMS), Trusted Research Environments (TRE), Secure Data Environments (SDE), Data Safe Havens (DSH), the Five Safes model, healthcare data processing, NHS Data Security and Protection Toolkit, anonymising personal data, data protection, and ethics. More ❯
Information Security Lead Auditor Department: Audit Employment Type: Permanent Location: London, UK Reporting To: Regional Operations Manager Description Please note, that a full driving licence is required as this is a field-based role. Join our growing Lead Auditor teams across the UK! At ISOQAR, we draw on our experience, knowledge, and ambition to empower organisations to achieve their … the Alcumus Group helps organisations increase resilience and manage risk, protecting its customers, workforce, stakeholders, and the environment. Due to our continued growth, we are seeking professionals within information security to join our expanding Lead Auditor teams supporting a broad range of clients across the UK . With onsite practical experience and deep knowledge of industry processes, policies, and … and Divisional inductions, you will undertake a 12-week training programme, including classroom and onsite learning with a Senior Lead Auditor, to achieve your Lead Auditor qualifications in Quality Management Systems (9001) and Information SecurityManagement Systems (27001). What that means day to day The life of a Lead Auditor is varied and engaging, with no More ❯
recognized as a "Best Company to Work For," and we're proud of our team for receiving awards for workplace effectiveness and flexibility. What You'll Do As our Security Engineer, you'll be responsible for managing our security posture as well as keeping our application safe from external threats. Our ideal Security Engineer will be able … to manage IT-related security issues, such as firewall management, HIDS/HIPS configuration, log monitoring, and audit compliance (SOC II). You will ensure that our software application is both manually and automatically pentested for security vulnerabilities (including Red Team and Blue Team exercises), and be a decision-maker in all things securitymanagement … the plug" on a feature, application, or other business function if it presents a significant risk to the company. You will: Conduct penetration tests against web applications infrastructure Validate security on new hardware and software infrastructure Assist front-line company representatives with security questions Manage firewall rules and internal pentesting Manage SOC II controls and external pentesting Manage More ❯
in a safe manner. Manage site and gate operations based on planned forecasts from the logistics team. Produce KPI reports in line with SCS and HS2 requirements. Non-conformance management, supporting solution implementation to avoid repeat occurrences. Any other business relating to organization the Duty Access Managers role. Please note the above list of activities is not a full … sense approach to working situations Current qualification in either Site Managers Safety Training Scheme (SMSTS) or Site Supervisor Safety Training Scheme (SSSTS). Community Safety Accreditation Scheme for Traffic Management CSAS is preferable. Current Construction Skills Certification Scheme card (CSCS). Able to work in a high-pressured environment. Working knowledge of FORS/CLOCS. Experience in construction site … Experience in delivering excellent customer service is preferable. Knowledge and practical use of Excel and PowerPoint packages is preferable. Experience of managing a team is preferable. Experience in Conflict Management is preferable. About the Company The role will work on the HS2 project. HS2 is the UK's new high speed rail network. It will be a catalyst for More ❯
managing externally appointed auditors and for the maintenance of a variety of ISO standards. Responsible for the adherence to and continued certification of the following standards: ISO 9001 Quality Management System ISO 27001 Information SecurityManagement System PCI-DSS Payment Card Industry Data Security Standard ISO 22301 Business Continuity GDPR and Data Protection Laws Conduct regular … initiatives, identify and assess corporate risk, investigate customer and corporate incidents, monitor continuous improvement, recommend effective controls and processes, and integrate specific compliance objectives within business units. Influence senior management in identifying compliance risks and provide appropriate commercial solutions. Monitor industry, regulatory and corporate developments in order to identify areas of vulnerability and risk. Develop and implement corrective/… legal compliance, etc. Establish and maintain a timetable for annual testing of the Business Continuity Strategy. Develop induction materials and implement training programs for staff in respect of Information Security and Business Continuity. More ❯
be reported to HS2. It is an SCSJV requirement that all employees, Design House, and Supply Chains must implement and comply with the requirements of ISO 9001:2015 Quality Management System, ISO 14001:2015 Environmental Management System with guidance for use", OHSAS 18001:2017 Occupational Health and Safety Management Systems and ISO/IEC 27001:2013 Information … SecurityManagement System, Policies, Plans, Procedures and Processes, and statutory requirements as they affect the Joint Venture 's operations and ensure that the requirements, as applicable within their discipline, are effectively implemented on the project. Develop a culture of safety on the project through the absolute commitment to the Zero Accidents target and ethos, and develops a wider More ❯
with coordinating ISO meetings and minutes Assisting with investigating non-conformances Updating processes where necessary Follow up corrective action with necessary departments Update records when complete Communicating with ISO management company Assisting with company training records and planning Contribute to continual improvement of all company operations Key Skills Experience: Minimum one-year experience in operations administration. Organizational Ability: Strong … organizational skills and attention to detail. Willingness to Learn: Eagerness to acquire new knowledge. Teamwork and Independence: Ability to work both independently and as part of a team. Task Management: Capability to manage multiple tasks and priorities. Problem Solving: Attention to detail and strong problem-solving skills. Self-Learning: Ability to self-learn and resolve complex issues. Pressure Handling … solutions worldwide, with deep regional expertise and a commitment to customer satisfaction. iTS is both ISO 9001:2015 and ISO/IEC accredited and highly recognised in our Quality Management Systems (AMS) and Information SecurityManagement Systems. For more information about our company, please visit our website at Company Values Customer Focused: We strive to ensure that More ❯
technically skilled Senior IT Engineer to lead the delivery, support, and continuous improvement of core infrastructure services. This is a hands-on role where you will oversee systems performance, security, and user support while helping to shape the organisation’s IT roadmap. You’ll act as a technical expert, project contributor, and mentor within the wider IT team. Key … to second- or third-line support as required. Service Enhancement: Collaborate with internal teams to assess evolving needs and recommend or implement improvements to IT tools and systems. Endpoint SecurityManagement: Administer and update endpoint protection across all user devices to ensure systems remain secure and compliant. User Account Administration: Set up and manage user profiles, access permissions … projects, ensuring timely delivery in line with project goals. Team Mentorship: Provide day-to-day guidance and coaching to junior IT team members, helping them build confidence and capability. Management Support: Deputise for the IT Infrastructure Manager during absences or periods of peak demand to help maintain operational continuity. Ad-hoc Duties: Support additional tasks as required by senior More ❯
race, colour, religion, national or ethnic origin, sexual orientation, gender identity or expression, age, disability or other characteristics. Your mission Lead the development, implementation, and maintenance of the Interface Management Plan and integration processes for railway systems design. Accountable for ensuring and overseeing the development of the management plans in respect of RAM, System Safety, Interoperability, Securitymanagement, and the required processes and procedures. Oversee systems integration from design through to construction, managing system-level specifications and Interface Control Documents (ICDs). Ensure alignment and consistency of sub-system deliverables across the project and contribute to standardisation of specifications. Coordinate development and assurance of plans for RAM, System Safety, Interoperability, and Security, including compliance … coordinator across all system interfaces, including with the Client (HS2 Ltd), Rail Systems, Civils, and Station contractors. Lead and manage technical teams responsible for RAM, Safety, Interoperability, EMC, and Security, ensuring integrated delivery and assurance evidence. Conduct and support design reviews, HAZID/HAZOP workshops, assurance submissions, and interface resolution across all stakeholders. Track and manage interface milestones within More ❯
race, colour, religion, national or ethnic origin, sexual orientation, gender identity or expression, age, disability or other characteristics. Your mission Lead the development, implementation, and maintenance of the Interface Management Plan and integration processes for railway systems design. Accountable for ensuring and overseeing the development of the management plans in respect of RAM, System Safety, Interoperability, Securitymanagement, and the required processes and procedures. Oversee systems integration from design through to construction, managing system-level specifications and Interface Control Documents (ICDs). Ensure alignment and consistency of sub-system deliverables across the project and contribute to standardisation of specifications. Coordinate development and assurance of plans for RAM, System Safety, Interoperability, and Security, including compliance … coordinator across all system interfaces, including with the Client (HS2 Ltd), Rail Systems, Civils, and Station contractors. Lead and manage technical teams responsible for RAM, Safety, Interoperability, EMC, and Security, ensuring integrated delivery and assurance evidence. Conduct and support design reviews, HAZID/HAZOP workshops, assurance submissions, and interface resolution across all stakeholders. Track and manage interface milestones within More ❯